$ rpki-client -vvf rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft File: pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft (raw, json) Hash identifier: n1tTuxtGCtzVVEBv3PJrVUsi0XNKKNUU5p8qNGJyNUk= Subject key identifier: 7A:C4:5E:FE:A6:D2:19:57:83:90:31:65:C8:BC:79:D7:11:E0:C3:CA Authority key identifier: A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9 Certificate issuer: /CN=A917C4E7/serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9 Certificate serial: 02CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft Manifest number: 02C2 Signing time: Fri 25 Apr 2025 01:10:34 +0000 Manifest this update: Fri 25 Apr 2025 01:10:33 +0000 Manifest next update: Fri 02 May 2025 01:10:33 +0000 Files and hashes: 1: pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl (hash: 3V9F2uq2gUR6x8rC2uMFKWtKWlwVE4jbpL+1mCGaXa4=) 2: E6054D96F3CB11ECA86DCE60C4F9AE02.roa (hash: PELmNyhpg0raHsA7GFw1TRNGLjn8BhP7w+wplytqqsg=) 3: AB6989BCEADF11ECADC46036C4F9AE02.roa (hash: yhsDMBW1yOy0Jq2CHVI1ejI5EG1pZPsxlabs6cbZ8HE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:10:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 715 (0x2cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C4E7, serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9 Validity Not Before: Apr 25 01:10:33 2025 GMT Not After : May 2 01:10:33 2025 GMT Subject: CN=680ae109-767e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5d:b4:b4:4e:1b:8b:64:53:2b:dc:f8:05:2b: a8:23:70:72:3f:8e:1a:c2:38:12:c6:16:4c:94:2c: d9:9c:03:57:67:33:9e:40:29:85:cc:d1:c2:61:eb: 7c:7a:ef:03:f3:40:b8:b1:f1:c9:c1:81:f8:bd:22: a4:cb:0f:8e:01:d2:4f:24:58:b4:67:cd:85:9b:2e: 90:ff:d3:fe:49:57:93:83:b3:e7:9d:e2:f1:19:23: b0:d2:06:4c:70:f4:18:5d:1a:b7:00:9e:7f:42:c6: 5c:25:20:04:2c:ed:5c:58:a1:3f:4b:48:87:8e:1c: 55:46:cc:a5:c1:a6:92:d6:2d:54:60:e4:31:ab:b4: ef:44:3f:b3:0f:61:33:41:ed:02:45:73:97:63:cc: c1:06:98:e1:34:19:58:ff:78:28:b8:4d:e3:48:2f: 53:9c:64:4d:81:3d:fb:fe:0d:07:6f:37:c3:1d:d4: fb:46:b4:3c:c4:ce:19:76:99:f5:ab:00:1f:cc:f6: aa:ad:16:09:fa:3c:5f:f8:a0:6b:67:0d:d1:b9:8e: b1:e4:18:55:f8:f9:73:6e:d3:aa:b8:54:28:79:3b: 35:31:a3:c8:cb:7d:81:8a:67:6a:60:21:38:53:9a: d4:e8:43:eb:dc:16:d9:30:e3:25:a2:c7:0c:eb:4e: d9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C4:5E:FE:A6:D2:19:57:83:90:31:65:C8:BC:79:D7:11:E0:C3:CA X509v3 Authority Key Identifier: keyid:A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:bb:15:c1:5a:dd:64:62:3d:2a:12:0c:4e:03:9a:f3:53:46: 9f:ce:f8:9c:ac:26:f1:7e:1a:43:37:f5:49:34:f1:aa:b8:42: 06:e9:12:07:78:3e:74:1f:72:7a:95:05:6f:98:d2:d6:bf:6b: 87:f7:27:70:9f:3f:65:4c:b3:c2:3b:79:21:f2:3d:10:70:2c: 77:a0:bc:31:f5:5a:70:fc:51:17:c6:c7:e9:af:fe:27:fb:08: bd:35:8c:22:89:60:a7:db:aa:13:a6:84:8b:0d:a1:cb:46:c5: c7:5e:33:b1:b9:5f:61:28:3c:33:75:70:12:9a:81:d0:17:fc: ab:9b:30:fd:63:94:48:37:e9:30:cc:62:71:08:2c:47:44:c5: 95:cb:49:22:6f:50:1e:75:7a:2a:b1:ab:9e:e3:3d:9a:95:e8: ac:c7:ca:fc:e2:18:4d:75:ad:ae:f2:09:d5:44:2f:4c:b4:8f: 53:00:b3:01:57:ac:6d:aa:29:0a:01:b6:51:1b:dc:6e:48:be: ac:b2:45:6e:d3:4c:26:09:25:e7:7d:62:7c:01:a7:6a:fd:03: 42:15:d7:bf:49:66:7e:ab:75:ae:94:a3:ec:8d:f1:1b:d7:89: d5:e2:d7:e9:f1:a3:8d:25:49:71:ff:33:a8:db:1d:b0:2f:b8: 43:c6:03:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0RTcxMTAvBgNVBAUTKEE1QzRBMEFCMEU1RUUxM0IxNDg0NTQzOUIxQUU0RkIz NDQ2OEM3QjkwHhcNMjUwNDI1MDExMDMzWhcNMjUwNTAyMDExMDMzWjAYMRYwFAYD VQQDEw02ODBhZTEwOS03NjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3120tE4bi2RTK9z4BSuoI3ByP44awjgSxhZMlCzZnANXZzOeQCmFzNHCYet8 eu8D80C4sfHJwYH4vSKkyw+OAdJPJFi0Z82Fmy6Q/9P+SVeTg7PnneLxGSOw0gZM cPQYXRq3AJ5/QsZcJSAELO1cWKE/S0iHjhxVRsylwaaS1i1UYOQxq7TvRD+zD2Ez Qe0CRXOXY8zBBpjhNBlY/3gouE3jSC9TnGRNgT37/g0HbzfDHdT7RrQ8xM4Zdpn1 qwAfzPaqrRYJ+jxf+KBrZw3RuY6x5BhV+PlzbtOquFQoeTs1MaPIy32BimdqYCE4 U5rU6EPr3BbZMOMloscM607ZxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHrEXv6m 0hlXg5AxZci8edcR4MPKMB8GA1UdIwQYMBaAFKXEoKsOXuE7FIRUObGuT7NEaMe5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzRFNy85ODFDMDU1OEVB RDgxMUVDQkM3RUUwMTVDNEY5QUUwMi9wY1NncXc1ZTRUc1VoRlE1c2E1UHMwUm94 N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BjU2dxdzVlNFRzVWhGUTVzYTVQczBSb3g3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzRFNy85ODFDMDU1OEVBRDgxMUVDQkM3RUUwMTVDNEY5QUUwMi9wY1NncXc1ZTRU c1VoRlE1c2E1UHMwUm94N2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXuxXBWt1kYj0qEgxOA5rzU0afzvicrCbxfhpDN/VJNPGquEIG6RIH eD50H3J6lQVvmNLWv2uH9ydwnz9lTLPCO3kh8j0QcCx3oLwx9Vpw/FEXxsfpr/4n +wi9NYwiiWCn26oTpoSLDaHLRsXHXjOxuV9hKDwzdXASmoHQF/yrmzD9Y5RIN+kw zGJxCCxHRMWVy0kib1AedXoqsaue4z2aleisx8r84hhNda2u8gnVRC9MtI9TALMB V6xtqikKAbZRG9xuSL6sskVu00wmCSXnfWJ8Aadq/QNCFde/SWZ+q3WulKPsjfEb 14nV4tfp8aONJUlx/zOo2x2wL7hDxgOG -----END CERTIFICATE-----Generated at Sat Apr 26 03:37:17 2025 by rpki-client